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INTRODUCTION 


This  checklist  is  a  companion  document  to  Human  Factors 
in  the  Design  and  Evaluation  of  Air  Traffic  Control  Systems. 
The  items  contained  in  this  checklist  have  been  derived  from 
this  handbook.  The  primary  purpose  of  the  checklist  is  to 
point  air  traffic  operations  specialists  (and  other  operations 
specialists)  to  human  factors  issues  *hat  liiev  may  wish  to 
include  in  their  consideration  of  a  new  system  or  subsystem, 
or  a  new  component  of  an  existing  system.  Responses  to 
the  checklist  items  can  help  to  focus  group  discussions  and 
identify  issues  that  should  be  addressed  in  every  stage  of  the 
acquisition  process,  from  the  development  of  system 
requirements  to  formal  operational  testing.  Operations 
specialists  may  wish  to  use  some  of  the  items  as  a  basis  for 
identifying  human  factors  issues  that  should  be  formulated 
into  appropriate  requirements  and  specifications.  In  order  to 
do  this,  a  knowledge  of  the  system  will  be  necessary  to 
relate  the  checklist  items  to  a  specific  system  attribute  or 
function.  Use  of  the  checklist  in  this  way  can  also  support 
the  development  of  a  Human  Factors  Plan  as  required  by 
FAA  Order  1810. IF,  Acquisition  Policy.  (For  specific 
information  on  how  to  write  a  human  factors  plan,  see 
Chapter  2  in  Human  Factors  in  the  Design  and  Evaluation  of 
Air  Traffic  Control  Systems.) 

The  checklist  is  intended  to  add  structure  and  objectivity  to 
the  selection  and  evaluation  of  ATC  systems  and 
subsystems.  It  is  not  meant  to  serve  as  a  comprehensive 
assessment  or  to  replace  usability  testing.  The  checklist  can 
only  examine  individual  components  of  a  system  and  point 
to  broader  issues  (such  as  how  these  components  fit 
together,  the  uses  of  automation,  etc.).  In  many  cases,  the 
ability  of  the  checklist  to  identify  potential  problems  will  be 
entirely  dependent  on  the  person  using  the  checklist.  Where 
checklist  items  are  general  or  broad,  an  intimate  knowledge 
of  the  system  and  how  the  user  will  use  the  system,  is 
required  to  make  the  connection  between  the  intent  of  the 
item  and  specific  system  attributes  or  functions.  Many  of 
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the  checklist  items  are  objective  and  precise  and  can  be 
answered  with  observations  alone  (e.g.,  "the  user  can  adjust 
symbol  size").  However,  other  items  are  more  general  and 
the  answer  may  require  objective  testing  (e.g,  "the  meanings 
of  auditory  displays  are  readiiy  apparent").  Also,  some  of 
the  items  are  idealistic;  they  represent  the  ideal  based  on 
current  human  factors  knowledge.  They  are  not  offered  as 
system  requirements  or  standards,  nor  do  they  preclude 
compromise;  where  compromises  must  be  made,  however, 
the  implications  should  be  clearly  understood.  This  material 
is  provided  solely  for  guidance  and  is  intended  to  be  used  by 
air  traffic  specialists  as  they  see  fit. 

The  numbers  in  parentheses  at  the  end  of  each  checklist 
item  refer  to  the  section  in  Human  Factors  in  the  Design  and 
Evaluation  of  Air  Traffic  Control  Systems  that  discusses  the 
issue.  This  mapping  allows  the  checklist  user  to  learn  about 
the  basis  for  the  item,  why  it  is  important,  and  the 
implications  of  compromise.  Checklist  items  marked  with  an 
"E"  indicate  items  that  must  be  assessed  with  equipment 
and/or  by  referring  to  the  specifications  documentation. 


Key  to  Checklist  responses: 
S  U  N/A 


S 

a 

M/A 


Satisfactory 
Unsatisfactory 
Mot  Applicable 


GENERAL 


1.  Separately  developed  subsystems  are  s  u  N/A 

effectively  integrated  into  the  operational 
environment  so  that  they  are  compatible  with 
existing  equipment  and  procedures  (6.1.2). 


2.  With  this  design,  the  controller  can  find  the  S  U  N/A 
necessary  information  quickly  so  that  the 
computer  does  not  delay  the  controller  in  any 
way  (6.1.2). 


3.  This  design  provides  all  the  information  S  U  N/A 

needed  for  planning  purposes  (5.2.1). 


4.  This  design  provides  the  controller  with  all  the  S  u  N/A 
necessary  information  for  a  specific  task  when 
it  is  needed/in  the  appropriate  sequence 
(5.3.2). 


5.  The  information  provided  helps  the  controller  S  U  N/A 
to  recognize  situations  that  require  control 
action  (5.2.3). 
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6.  Visual  and  auditory  coding  techniques  help  S  U  N/A 
the  controller  maintain  productive  scanning 
and  problem-detection  strategies  (5.3.2). 


7.  Perceptual  displays  help  the  controller  in  S  U  N/A 

building  and  maintaining  situational 
awareness,  i.e.,  in  perceiving,  integrating,  and 
projecting  information  about  the  ATC  situation 
(5.6.1,  5.4.2). 


8.  Information  presentation  is  split  between  S  U  N/A 

auditory  and  visual  displays  such  that  neither  J_ 
mode  is  overused  or  cluttered  (7,3.9). 


9.  If  predictive  displays  are  provided,  they  assist  S  U  N/A 
the  controller  in  projecting  the  combined  [ 

effects  of  many  situational  factors  (5.2.3). 


10.  If  predictive  displays  are  provided,  they  do  not  r  S  U  N/A 
place  additional  memory  demands  or  other  j  [  ; 

information-processing  burdens  on  the 
controller  (5.2.3). 


Notes 


2 


0 


VISUAL  DISPLAYS 


A.  General 

1.  Information  that  the  controller  needs  does  not  S  U  N/A 
disappear  from  the  screen  without  being 
deleted  or  suppressed  by  the  controller 
(7.1.20). 


2.  The  computer  responds  quickly  so  that  the  S  U  N/A 
controller  is  not  kept  waiting  for  information 
(5.1.2). 


Essential  ATC  information  is  never  blocked  or  S  U  N/A 
obstructed  by  other  information  (7.2.17).  1 


All  information  that  a  controller  needs  to  S  U  N/A 

accomplish  a  task  that  is  essentia!  and  time- 
critical  is  located  on  a  single  page  or  in  a 
single  window  (7.2.17). 


5.  Visual  displays  provide  necessary  information  S  U  N/A 
in  a  usable  form  when  it  is  needed  (5.3.2, 

7.2). 


Notes 


Human  Factors  Checklist 


6.  Display  clutter  is  not  a  problem  (7.2.20).  SU  N/A 


7.  The  meaning  of  each  icon  is  immediately  S  U  N/A 

apparent  to  the  controller  or  it  is  labelled 
(7.2.1). 


8.  Symbols  chosen  for  the  display  are  intuitive  S  U  N/A 
so  that  the  controller  can  interpret  them 
quickly  and  accurately  (7.2.9,  5.1.5). 


9.  Controllers  can  change  the  amount  of  task-  S  U  N/A 
related  detail  that  is  presented  (7.2.20). 


10.  When  the  meaning  of  the  color  is  critical, 

color  is  used  redundantly  with  another  type  of 
visual  cue,  such  as  shape,  text,  or  size.  For 
example,  all  yellow  objects  have  a  triangular 
shape  (7.2.12,  3.2.3). 


S  U  N/A 


1 1 .  The  controller  is  able  to  recognize  and  S  U  N/A 

differentiate  between  color  codes  under  all  [ _ 

anticipated  lighting  conditions  (9.6,1). 


Motes 


12.  The  controller  will  not  need  to  identify  more  S  u  N/A 
than  five  colors  (to  interpret  the  meaning  of 
the  color  when  it  stands  alone)  (7.2.13, 

3.2.4). 


13.  Color  displays  are  readable  and  adequately  S  U  N/A 
bright  under  all  anticipated  lighting  conditions 
(9.6.1). 


14.  When  the  controller  must  distinguish  between  3  U  N/A 
the  color  of  characters  and  symbols,  small 
blue  characters  and  symbols  are  not  used 
(7.2.11,3.2.3). 


15.  Saturated  (i.e.,  vivid)  red  and  blue  are  never  S  U  N/A 
presented  next  to  each  other  (7.2.14,  3.1.8;  |  j  j  ] 

also  see  Figure  3-11). 


16.  Colors  are  far  enough  apart  in  perceptual  S  U  N/A 

terms  that  they  are  not  confusable  even  when 
“washed  out”  by  sunlight,  if  applicable 
(3.2.3). 


17.  Characters  and  symbols  can  be  read  easily  SU  N/A 
under  all  anticipated  lighting  conditions  (e.g., 
from  dim  light  to  direct  sunlight,  it  applicable) 

(9.3.4,  9.6.1,  9.6.2,  7.2.8).  “ 


Motes 
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18.  Computer  displays  and  controls  are  clearly 
visible  and  easy  to  use  under  all  anticipated 
lighting  conditions  (e.g.,  from  dim  light  to 
direct  sunlight,  if  applicable)  (9.3.4,  9.6.1, 
9.6.3,  7.2.8). 


19.  To  acquire  needed  information,  the  controller 
only  needs  to  look  at  a  single,  localized 
display  i.e.,  switching  back  and  forth  between 
two  or  more  displays  is  not  necessary  to 
perform  an  individual  task.  (6.1.2). 


20.  The  position  and  form  of  displayed  objects  S  U  N/A 
appear  the  same  to  the  controller  while  seated  \  j  | 
directly  in  front  of  the  object  as  they  do  from 
other  anticipated  viewing  angles  (7.2.7). 


21 .  If  windows  are  used,  the  controller  can  scroll  S  U  N/A  $ 

the  underlying  data  set  (7.2.17). 

22.  If  windows  are  used,  the  controller  can  move  S  U  N/A 

windows  (7.2.16).  j  - 


23.  if  windows  are  used,  the  controller  can  resize  s  u 

windows  (7.2.17).  _ 

i 

24.  If  windows  are  used,  the  controller  can  iconify  S  U  N/A 

display  pages  (7.2.17).  _ 

Notes 
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1 


,:V 


25.  If  windows  are  used,  the  controller  can  open  S  U  N/A 
and  close  windows  (7.2.17). 


26.  The  active  window  is  highlighted  to  distinguish  S  U  N/A 
it  from  inactive  windows  (7.2.17). 


27.  The  relationship  between  different  windows  is  S  U  N/A 
clear  to  the  user  (7.2.17). 


S  l  N/A 


S  U  N/A 


28.  All  information  that  a  controller  needs  to 

accomplish  a  given  task  is  located  in  a  single 
window  or  within  a  small  number  of  related 
windows  (7.2.17). 


29.  Abnormal  data  are  emphasized  effectively  so 
that  it  attracts  the  controller’s  attention 
(7.2.11). 


30.  Updated  data  are  emphasized  effectively  so 
that  it  attracts  the  controller’s  attention 
(7.2.11). 


31.  Acronyms  in  the  new  display  system  have  the  S  U  N/A 

same  meanings  as  in  the  previous  system 

n  o  o\  1  ! 

v  •  • 
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32.  Terms  in  the  new  display  system  have  the  S  u  N/A 
same  meanings  as  in  the  previous  system 

(7.2.2). 


33.  Symbols  in  the  new  display  system  have  the  S  U  N/A 
same  meanings  as  in  the  previous  system 

(7.2.3). 


34.  Symbol  size  can  be  adjusted  by  the  controller  S  U  N/A 
(7.2.10). 


35.  Visual  displays  and  their  labels  are  sufficiently  S  U  N/A 
visible  under  all  anticipated  lighting  conditions 

(9.3.4). 


36.  If  size  coding  is  used,  it  is  limited  to  two  S  U  N/A 

widely  different  sizes  (7.2.11). 


37.  Graphic  displays  are  used  only  to  present  S  U  N/A 

information  that  is  naturally  pictorial  and  to 
present  dynamic  data  (7.2.5). 


38.  Placement  of  standard  data  fields  is  consistent  S  U  N/A 
from  one  display  to  another  (7.2.18). 


Notes 


39.  Formats  used  within  data  fields  are  consistent  S  u  N/A 
from  one  display  to  another  (7.2.18). 


40.  Labels,  terms,  and  abbreviations  are  used  S  U  N/A 
consistently  across  the  display  set  (7.2.15). 


41.  Only  one  abbreviation  is  used  for  each  word  S  U  N/A 
or  item  and  abbreviations  are  used 
consistently  on  all  visual  displays  (7.2.15). 


42.  Punctuation  is  used  conservatively  and  S  U  N/A 

consistently  (7.2.15). 


43.  Continuous  text  is  presented  in  mixed  upper-  S  U  N/A 
and-lower  case  (7.2.15). 


44.  Computer  printouts  (in  upper  and  lower  case)  S  U  N/A 
are  available  for  lengthy  text  (7.2.15). 


45.  Visual  displays  maintain  good  image  quality  S  U  N/A 
even  at  the  dimmest  possible  setting  (7.2.8). 
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E  46.  According  to  the  display  monitor  S  U  N/A 

manufacturer’s  report,  the  display  refreshes 
at  a  rate  of  65  cycles  (or  more)  per  second  " 
so  that  the  display  does  not  appear  to 
flicker  (7.2.6,  7.2.22,  3.1.6). 


E  47.  According  to  the  display  monitor  S  U  N/A 

manufacturer’s  report,  a  displayed  object 
moves  no  more  than  .0002  times  the 
viewing  distance  (in  inches)  in  one  second 
so  that  no  display  jitter  can  be  detected 
(7.2.22,  7.2.23). 


E  48.  The  heights  and  widths  of  characters  S  u  n/a 

appearing  at  the  center  and  the  four 
corners  of  the  displays  do  not  vary  by  ' 

more  than  10  percent  (7.2.22). 


E  49.  When  the  center  of  the  display  is  compared  S  U  N/A 
to  an  edge,  brightness  uniformity  does  not  | 
vary  by  more  than  50  percent  (7.2.22). 


E  50.  The  luminance  of  dynamic  text  and  s  u  n/a 

symbols  are  eight  times  that  of  the  static 
background  (7.2.22). 


E  51.  All  colors  are  8  times  brighter  than  the  S  U  N/A 

static  background  symbology  (7.2.14). 
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E  52.  When  the  controller  must  distinguish 

between  the  color  of  characters,  character 
height  is  at  least  21  minutes  of  arc  (7.2.10, 
3.2.4). 


S  U  N/A 


B.  Visual  Alerts 

1 .  Information  that  the  controller  must  read  and  S  U  N/A 
understand  quickly,  such  as  alarms  or  critical 
error  messages,  never  blinks  or  flashes  rapidly 
(greater  than  3  Hz)  (5.1.3,  5.1.5,  7.2.11). 


High-priority  alerts  and  other  critical 
information  are  located  within  the  central 
display  area  (i.e.,  the  central  15  degrees  of 
the  area  where  the  controller  normally  looks, 
given  the  normal  viewing  position)  (7.2.11, 
9.3.4). 


S  U  N/A 


3.  Highlighting  and  blinking  are  used  sparingly  S  U  N/A 

(7.2.11).  '  ' 


4.  Alerts  have  a  low  incidence  of  false  alarms  S  u  N/A 

(7.2.11).  1 


5.  The  same  color  coding  strategy  is  applied  to  S  U  N/A  ^ 
every  display  used  by  the  same  controller 

(7.2.12).  '  : 
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6.  The  color  red  is  used  only  for  warning/danger  S  U  N/A 
(7.2.12). 


7.  Yellow  is  used  to  indicate  caution  (7.2.12).  S  U  N/A 


8.  Green  is  used  to  indicate  for  normal/ready  S  U  N/A 
status  (7.2.12). 


9.  fSo  more  than  two  levels  of  blinking  are  used  s  U  N/A 
(7.2.11). 


10.  If  blinking  is  used,  it  is  cancelable  by  the  S  U  N/A 

controller  (7.2.1 1).  j 


11.  For  a  time-critical  warning  system  (such  as  a  S  U  N/A 
conflict  detection  or  resolution  advisory),  the 
controller  response  time  that  is  assumed  by 
the  algorithm  has  been  measured  (5.1.5). 


12.  This  design  effectively  directs  the  controller’s  S  U  W/K 
attention  by  means  of  alerting,  coding,  and  j  j  ! 
emphasis  techniques  (5.3.1,  7.2.11). 


E  13.  Information  that  is  blinking,  has  an  “on"  S  U  N/A 
period  that  is  at  least  as  long  as  the  “off" 
period  (5.1.5). 
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E  14.  If  blinking  is  used,  the  blink  rate  is  between  S  U  N/A 
2  and  3  Hz  (5.1.5,  7.2.11).  [  ~] 


e 


AUDITORY  ALERTS 


m 

AUDITORY  ALERTS 


A.  General 

1 .  Auditory  alerts  are  used  only  when  necessary  S  U  N/A 

(7.3.2,  7.3.3).  1  1  | 

2.  The  number  of  auditory  alerts  is  sufficient,  S  u  N/A 

that  is,  auditory  alerts  are  included  wherever 

they  are  needed  (7.3.2). 

3.  The  meanings  of  auditory  alerts  are  readily  S  U  N/A 

apparent  (7.3.7). 


4.  All  proposed  auditory  alerts  have  been  tested  S  U  N/A 
and  evaluated  in  a  realistic  environment  by  a 
representative  set  of  controllers  (7.4.3). 


5.  The  auditory  alert  does  not  nag,  or  otherwise  S  U  N/A  § 
annoy,  the  controller  (7.3.5,  7.3.6). 


6.  Auditory  signals  (and  speech  messages)  are  SU  N/A 
not  masked  by  other  auditory  alerts  or 
background  noise  (7.3.7,  7,3.8,  4.1.3). 


» 
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7.  For  any  situation,  it  is  impossible  for  more  S  U  N/A 
than  a  few  auditory  alerts  to  be  presented 
simultaneously  (7.3.7). 


8.  The  number  of  auditory  signals  (e.g.,  S  U  N/A 

warnings,  alerts)  that  the  controller  may  need 
to  identify  is  fewer  than  five  (7.3.8). 


9.  Auditory  alerts  are  easily  discernible  from  S  U  N/A 
other  signals  or  noise  (7.3.7,  7.3.8,  4.1.3). 


10.  Auditory  alerts  do  not  provide  more 
information  than  is  necessary  (7.3.7). 


S  U  N/A 


1 1.  The  same  auditory  signal  always  indicates  the  S  U  N/A 
same  information  (7.3.7). 


12.  Auditory  alerts  are  consistently  implemented  S  U  N/A 
throughout  the  system  (7.3.7). 


13.  The  information  contained  in  an  auditory  alert  S  U  N/A 
is  also  displayed  visually  (7.3.8).  ! 


14.  Auditory  alerts  are  only  used  when  immediate  S  U  N/A 
action  is  required  (7.3.8). 


Motes 


USEE 


15.  Auditory  alerts  terminate  automatically  when  S  UN/A 
the  problem  is  corrected  (7.3.8). 


16.  Auditory  alerts  are  cancelable  by  the 
controller  (7.3.7,  7.3.8). 


S  U  N/A 


E  17.  A  modulated  signal  emits  from  one  to  eight  S  U  N/A 
beeps  per  second  (7.3.8). 


E  18.  A  warbling  sound  varies  from  one  to  three 
times  per  second  (7.3.8). 


S  U  N/A 


E  19.  The  frequency  of  all  auditory  signals  is 

between  500  and  3000  Hz  so  that  they  are 
well  within  the  band  of  frequencies  that 
humans  are  most  sensitive  to.  (7.3.8). 


S  U  N/A 


E  20.  Auditory  alerts  sound  for  at  least  a  0.5 
second  duration  (7.3.8). 


S  U  N/A 


E  21.  The  pause  between  a  repeating  auditory 

siqnal  is  less  than  or  equal  to  three  seconds 
(7.3.8). 


S  U  N/A 
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I  E  22.  Auditory  alerts  are  at  least  10  dB  above  S  u  n/a 
I  ambient  noise  or  have  been  demonstrated 

to  be  sufficiently  intense  for  a  specific 
;  working  environment  (7.3.7,  7.3.8). 

! 

! 

i 

I 

B.  Speech  Messages 

1.  A  detection  signal  display  (for  example  the  S  U  N/A 
j  sound  of  static  on  the  line)  precedes  a  voice 

i  warning,  unless  a  distinctive  synthesized  voice 

j  is  used  (7.3.3). 

j 

i 
j 

■  2.  Speech  messages  are  short  enough  to  be 

j  easily  remembered.  (7.3.4). 


3.  Brief  speech  messages  are  available  to  the 
controller  when  there  is  the  need  to  explain 
the  specific  nature  of  alarm  and  warning 
signals  (7.3.4). 


4.  Speech  displays  are  distinct  from  and  not 
easily  confused  with  other  voices  in  the 
control  room  (7.3.4). 


5.  The  controller  does  not  need  to  remember 
more  than  one  or  two  speech  messages  at  a 
time  in  order  to  accomplish  any  of  his  or  her 
ATC  tasks  (7.3.5,  7,3,7). 

Notes 


S  U  N/A 


S  U  N/A 


S  U  N/A 


S  U  N/A 


* 


» 
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6.  Speech  messages  are  not  masked  by  other 
auditory  alerts  or  background  noise  (7.3.7, 
4.1.3). 


E  7.  If  important  messages  are  produced  by 
synthetic  speech,  they  are  at  least  8  db 
above  the  surrounding  noise  (4.2.5). 
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IV. 


COGNITIVE  WORKLOAD 


A.  General 

1.  With  this  design,  the  controller  will  be  able  to 
build  and  maintain  sufficient  situational 
awareness  (6.2.1, 6.3.3,  8.3.4). 


S  U  N/A 


2.  The  design  assists  the  controller  in  detecting 
errors  in  data  entry  (5.2.4,  6.3.3). 


S  U  N/A 


The  design  assists  the  controller  in  correcting 
errors  in  data  entry  (5.2.4,  6.3.3). 


S  U  N/A 


This  design  presents  all  information  in  usable 
form;  the  controller  is  never  required  to 
transform  data  from  one  unit  to  another  or  to 
perform  mental  calculations  in  order  to  use 
the  data  (5.1.1,  7.5.3). 


S  U  N/A 


This  design  helps  the  controller  to  integrate 
information  from  multiple  sources,  if  the 
information  is  not  already  integrated  before  it 
is  presented  to  the  controller  (5.1.2,  5.4.2, 
5.6.1). 


S  U  N/A 
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6.  The  design  allows  the  controller  sufficient  time  SU  N/A 
to  perceive  and  act  upon  new  information 
(5.1.1,  5.1.5). 


7.  The  design  allows  the  controller  sufficient  time  S  U  N/A 
to  project  potential  outcomes  of  optional 
control  actions  (5.1.1). 


8.  This  design  requires  little  or  no  unaided  recall  S  U  N/A 
of  information  (5.4.7,  8.2.4). 


9.  This  system  provides  appropriate  memory  SU  N/A 
joggers  (e.g.,  prompts,  cues)  (5.2.1,  5.4.4, 

8.2.4). 


10.  This  design  does  not  require  the  controller  to  S  U  N/A 
recall  infrequently  used  data-entry  commands 
(8.2.5). 


1 1 .  This  design  does  not  place  greater  demands  S  U  N/A 
on  memory  than  the  previous  system  did 
(8.2.4). 


12.  This  design  does  not  increase  the  amount  of  SU  N/A 
data  entry  for  controller  tasks  (8  2.5). 


Notes 


S  U  N/A 


13.  in  comparison  to  the  established  baseline 
(e.g.,  the  previous  system),  controller 
workload  stays  about  the  same  with  this 
design  (8.2.3). 


14.  Controllers  will  be  able  to  make  this  design  S  U  N/A 
work  without  having  to  invent  ways  around 
design  flaws  (8.1.5). 


15.  This  design  supports  timesharing  of  S  U  N/A 

information  processing  activities,  that  is,  _ 

visual,  auditory,  and  decision-making 
processes  can  be  performed  together  without 
overloading  the  controller.  (5.2.1). 


16.  This  design  supports  complete,  accurate  S  U  N/A 

awareness  of  the  ATC  situation  (5.2.1). 


17.  This  design  is  not  likely  to  overload  the  S  _U_  N/A 

controller’s  working  memory  (5.2.1,  5.4.4). 


18.  The  information  that  is  selected  and  presented  S  U  N/A 
supports  the  controller  in  making  judgement 
calls  and  decisions  (5.2.1). 
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19.  Information  from  subsystems  is  integrated  and  SUN/A 
presented  in  a  way  that  minimizes  the  need  to 
switch  from  one  display  to  another  (5.2.1, 

5.4.2). 


20.  This  design  alerts  the  controller  to  critical 
situations  with  enough  lead  time  to  formulate 
and  execute  appropriate  responses  (5.3.2). 


S  U  N/A 


21.  This  design  allows  the  controller  to  keep  some  S  U  N/A 

information  processing  resources  in  reserve  ___  ^ _ 

for  unexpected  events  (5.3.2,  5.4.4). 


22.  This  design  calls  attention  to  situations  that 
depart  from  what  the  controller  would 
normally  expect  (5.4.5,  5.4.6,  5.6.2). 


S  U  N/A 


23.  This  design  provides  adequate  support  for  S  U  N/A 
achieving  aircraft  separation  and  for  detection 
of  potential  conflicts  (5.5.1). 


24.  The  design  allows  sufficient  time  for  the  S  U  N/A 

controller  to  perceive,  integrate,  project,  and 
act  upon  ATC  information  (5.6.1,  5.6.3, 

5.1.5). 
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25.  Workload  evaluations  have  considered  both  SU  N/A 
observable  and  perceived  effects  of  task 
demand  on  the  controller  (8.1.1). 


26.  System  demands  do  not  overload  or  S  U  N/A 

underload  the  controller  for  prolonged  periods _ 

of  time  (8.1.2,  8.3.3). 


27.  Participants  in  workload  assessments  SU  N/A 

represent  the  range  of  experience,  skills  and _ _ 

abilities  that  are  present  in  the  controller 
workforce  (8.1.3). 


28.  Workload  has  been  assessed  with  an  S  U  N/A 

appropriate  battery  of  measures  (8.1.3, 

8.3.3). 


29.  This  design  fosters  an  active,  yet  comfortably 
manageable,  role  for  the  controller  (8.2.1). 


S  U  N/A 


30.  When  tasks  are  performed  together,  workload 
remains  manageable  with  this  design  (8.3.1). 


S  U  N/A 


» 


31.  This  design  does  not  contribute  to  increased  SU  N/A 
information-processing  workload  (8.3.2). 


Notes 


S  U  N/A 
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32.  With  this  design,  the  controller  is  able  to 
maintain  the  highest  standards  of  safety, 
without  having  to  exert  extreme  effort  (8.3.4). 


33.  _rhe  design  supports  the  controller  in  making  S  U  N/A 
projections  about  the  near-future  traffic 
situation  (8.3.4).  u~l‘“  J 


34.  This  design  does  not  require  timesharing  of  S  U  N/A 
many  moderately  difficult  tasks  (8.3.4). 


# 


# 


35.  When  timesharing  is  necessary,  the  tasks  to  S  U  N/A 

be  timeshared  are  spread  across  the  * 

controller’s  resources,  that  is,  visual,  auditory, 
and  manual  capacities,  instead  of  loading  up 
on  just  one  or  two  capacities  (8.3.4). 

• 

36.  When  timesharing  demands  are  heavy,  this  S  U  N/A 
design  helps  the  controller  remember  to 

execute  intended  actions  (8.3.4). 


37.  Procedural  task  sequences  are  interruptable  at  S  U  N/A 
any  point  (8.3.4). 


38.  With  this  design,  the  controller  does  not 
experience  abrupt  changes  in  normal  task 
loading  (8.3.4). 


Notes 
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S  U  N/A 
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39.  With  this  design,  timing  of  tasks  can  be 
flexible  (8.3.4). 


S  U  N/A 


40.  When  certain  tasks  must  be  completed  at  S  U  N/A 
specific  times,  their  initiation  is  at  the 
controller’s  discretion  (8.3.4). 


41.  Use  of  this  design  over  time  will  not  have  a 
negative  effect  on  job  satisfaction  (8.3.5). 


42.  This  design  will  have  positive  effects  on  the  SU  N/A 

ways  in  which  ATC  team  members  interact _ 

and  communicate  with  each  other  (8.3.6). 


43.  This  design  provides  appropriate  information  S  U  N/A 
to  all  members  of  ATC  teams  (8.3.6). 


B.  Automation 


1. 


2. 


Automated  features  behave  in  ways  that  are 
consistent  with  controller  expectations  (6.3.3). 


After  system  recovery  from  degradation  or 
failure,  a  smooth  return  to  automated 
operations  will  be  possible  (6.2.1). 


s 

u 

N/A 

□ 

□ 

□ 

s 

u 

N/A 

n 

□ 

□ 
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3.  Automated  features  provide  explanation  of  S  U  N/A 
their  intentions,  recommendations,  and 
actions  in  ways  that  are  readily  understood  by 
controllers  (6.3.2). 


4.  With  this  design,  reversion  to  manual  control  S  U  N/A 

will  be  easy;  that  is,  the  controller  will  have  no _ 

problem  stepping  in  when  the  automation  fails 
(6.2.1,  6.3.3). 


5.  Increased  ATC  automation  results  in  better  S  U  N/A 
integration  of  data  from  multiple  sources 
(6.1.2). 


6.  The  limitations  of  the  computer’s  information  S  U  N/A 
and  advice  are  clear  to  the  controller  (6.2.1). 


7.  This  design  provides  an  active,  involved  role  S  U  N/A 
for  the  controller  (5.3.2,  5.6.2,  6.2.1,  6.3.3). 


8.  This  design  does  not  require  the  controller  to  S  U  N/A 

perform  purely  monitoring  tasks  for  more  than _ 

20  to  30  minutes  at  a  time  (5.3.2,  6.2.1). 


9.  Automated  aids  are  adequately  integrated  S  U  N/A 
with  each  other  (5.5.1). 
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10.  Decision  aids  don’t  need  to  be  monitored 
continuously  (5.6.1). 


11.  Decision  aids  benefit  the  controller  (5.6.1). 


12.  This  design  supports  the  controller’s 

development  of  strategies  for  dealing  with 
short-term  (tactical)  and  long-term  (strategic) 
situations  (5.6,2). 


S  U  N/A 


S  U  N/A 

S  U  N/A 

13.  Changes  in  the  situation  or  unusual  events  are 
clearly  indicated  and  are  not  easy  to  miss 
(5.6.2). 


S  U  N/A 


14.  This  design  will  not  induce  complacency 

(6.2.1). 


S  U  N/A 
- -  • 


15.  Provisions  have  been  made  to  help  controllers  S  U  N/A 
maintain  operational  skills  and  efficiency 
(6.2.1). 


t 
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DATA  ENTRY  PROCEDURES 


A.  General 


l. 


The  number  of  keystrokes  (or  other  control 
actions)  necessary  to  input  data  is  kept  to  a 
minimum  and  the  amount  and  complexity  of 
data  entry  is  about  the  same  as  was  required 
in  the  previous  system  (6.2.2). 


S  U  N/A 


2.  With  this  system,  data-entry  errors  can  be  S  u  n/a 
caught  and  corrected  before  they  propagate 
through  the  system  (6.3.3). 


3.  The  design  assists  the  controller  in  detecting  S  U  N/A 
and  correcting  errors  in  data  entry  (5.2.4, 

6.3.3,  7.5.3).  1 


i 


4.  This  system  makes  it  easy  to  recover  from 
data-entry  errors  (6.3.3,  7.5.3). 


S  U  N/A 

11  i 


5.  Keystrokes  or  other  data-entry  actions  are  SU  N/A 
echoed  immediately  on  the  screen,  that  is, 
there  is  no  delay  in  providing  a  legible 
representation  of  what  has  been  entered 
(7.5.3). 


t 


Notes 
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6.  The  data  entry  method  helps  to  minimize 
errors  and  provides  for  quick,  simple  data 
editing  and  correction  (7.5.3). 


7.  This  user  interface  system  queries  the  S  U  N/A 

controller  at  critical  choice  points,  e.g.,  “Are 
you  sure  you  want  to  delete  this  flight  plan?” 

(6.3.3). 


8.  A  particular  data  item,  such  as  assigned  SU  N/A 

altitude,  must  be  entered  only  once;  the  i  j 

computer  can  retain  this  value  and  enter  it  in 
other  fields,  as  appropriate  (7.5.3). 


9.  The  controller  receives  appropriate  feedback  S  U  N/A 
on  data  acceptance  or  rejection  (7.5.3). 


10.  The  computer  does  not  erase  all  or  part  of  S  U  N/A 
any  erroneous  data  entry  (7.5.3). 


1 1.  The  controller  controls  the  pace  of  data  entry,  S  U  N/A 
that  is,  the  computer  does  not  impose  time 
limits  or  time  outs  (7.5.3). 


12.  The  computer  does  not  restrict  the  order  in  SU  N/A 
which  data  items  are  entered  (7.5.3). 


Motes 


13.  The  computer  prompts  the  controller  for  data 
that  have  been  deferred  for  entry  (7.5.3). 


S  U  N/A 


14.  Data  processing  is  initiated  only  after  an  S  U  N/A 

explicit  command  from  the  controller  (7.5.3).  I 


15.  Boundaries  indicate  where  to  enter  the  data  S  U  N/A 
and  show  maximum  field  length  (7.2.17). 


16.  A  cursor  appears  to  indicate  daia-entry  mode  S  U  N/A 
and  location  (7.5.3).  } 


17.  The  controller  can  edit  all  or  part  of  a  data  S  U  N/A 
field  (7.5.3).  T  I 


18.  The  controller  is  not  required  to  enter  leading 
zeroes  for  numeric  entries  (7.5.3). 


S  U  N/A 


IS.  When  delimiters,  such  as  punctuation,  are 
required  to  partition  long  entries,  the 
computer  provides  the  required  format  and 
prompts  for  the  order  of  data  entry  (7.5.3). 


S  U  N/A 


20.  Field  labels  use  accepted  ATC  terminology  S  U  N/A 
and  are  used  consistently  (7.5.4). 


Human  Factors  Checklist 


B.  Commands  and  Command  Execution 

1 .  Command  execution  requires  minimal  S  U  N/A 

controller  action  (7.5.2). 


2.  The  consequences  of  destructive  commands 
are  explained  (7.5.2). 


S  U  N/A 


4 


a* 

£ 


n 

ii.  # 


3.  Destructive  commands  require  controller 
confirmation  of  intention  before  they  are 
executed  (7.5.2). 


S  U  N/A 


4. 


Command  execution  always  occurs  by  explicit 
controller  action,  never  as  a  by-product  of 
another  action  (7.5.2). 


S  U  N/A 

— i — r—i 


5. 


The  controller  can  suspend/interrupt  or 
cancel/undo  a  transaction  in  progress  (7.5.3). 


S  U  N/A 


6. 


Command  ordering  is  consistent  from  screen 
to  screen/window  to  window  (7.5.2). 


S  U  N/A 


7. 


Command  labels  use  accepted  ATC 
terminology  and  are  used  consistently  (7.5.4). 


S  U  N/A 
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8.  The  relevant  command  set  is  displayed  to  S  U  N/A 

show  the  controller  which  commands  are  ' _ _ 

currently  available  (7.5.2). 

• 

9.  Commands  are  consistent  in  their  placement  S  U  N/A 

across  multiple  screens,  panels,  or  windows; 

in  tlieir  wording;  and  in  their  method  of 
activation  (7.5.2). 


10.  The  computer  indicates  the  current  S  U  N/A 

operational  mode  (7.5.2)  . 


1 1 .  Entry  of  long  sequences  of  command  S  U  N/A 

parameters  is  not  required  (7.5.2). 


12.  tipper-  and  lower-case  letters  are  accepted  as  S  O  N/A 
equivalent  when  the  controller  is  entering  a  __ 
command  or  command  parameter  (7.5.2). 


13.  Feedback  is  always  given  to  indicate  that  the  SU  N/A 
computer  has  initiated  a  command  (7.5.2). 


» 


14.  Commands  should  be  stated  in  the  S  U  N/A 

affirmative;  that  is,  they  should  tell  the 
controller  what  to  do,  rather  than  what  not  to 
do  (7.2.15,  5.1.5). 


Notes 


I 
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C.  Menus 1 

1.  Menu  options  are  phrased  to  reflect  the  action  S  U  N/A 
executed  and  worded  in  user  vocabulary 
(7.2.18).  ' 


2.  Options  that  perform  opposing  actions  are  not  S  U  N/A 
placed  adjacent  to  each  other  (7.2.18). 


3.  The  number  of  menu  options  is  between  three  S  U  N/A 
and  ten  (five  to  six  options  is  optimal) 

(7.2.18). 

e 

4.  If  an  option,  or  set  of  options,  is  never  S  U  N/A 

available  to  the  user,  the  option(s)  is  not  in 

the  menu  (7.2.18). 

5.  If  an  option  is  temporarily  unavailable,  it  is  S  U  N/A 
displayed  in  the  menu,  but  dimmed  (7.2.18). 


6.  Menu  options  are  organized  in  logical  or  S  U  N/A 

functional  groupings  with  clear  titles  (7.2.18). 


7.  If  not  in  logical  groups,  order  is  by  frequency  S  U  N/A 
of  usage,  with  most  frequently  used  options  at 
the  top  (7.2. 1 8). 


Motes 
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1 


From  User  Interface  Specifications  for  the  Joint  Maritime 
Command  information  Systems,  Version  1.3,  by  Kathleen 
Fernandes,  November  1993. 
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8.  If  not  in  logical  groups  or  by  frequency,  S  U  N/A 

options  are  in  alphabetical  or  numerical  order 

(7.2.18). 


9.  Less  frequently  executed  options  and  S  U  N/A 

destructive  commands  are  at  the  bottom  of  _ u  _ _ 

the  menu  (7.2.18). 

10.  If  similar  options  are  in  different  menus,  the  SU  N/A 
options  are  ordered  in  a  consistent  manner 

(7.2.18). 


1 1.  Each  word  in  the  menu  is  presented  in  upper  S  U  N/A 
and  lower  case  with  the  first  letter  capitalized 

(7.2.18). 


12.  Cascading  submenus  appear  to  the  right  of 
the  parent  menu  (below,  if  space  to  the  right 
is  limited)  (7.2.18). 


S  U  N/A 


i 


13.  When  a  menu  is  displayed,  the  location  cursor  S  U  N/A 
is  in  the  first  available  option  (7.2.18). 


14.  When  a  pop-  up  menu  appears,  it  appears 
near  the  element  with  which  it  is  associated 

(7.2.18). 


S  U  N/A 
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> 

15.  A  window  containing  a  pop-up  menu  provides  S  U  N/A 
an  indication  that  the  menu  is  available 

(7.2.18).  ‘ 

I 

16.  If  they  are  presented  in  a  vertical  list,  menu  S  U  N/A 

options  are  left  justified  (7.2.18).  L 


17.  Menu  organization  supports  specific  controller  S  U  N/A 
tasks  (7.2.18). 


18.  Graphical  or  textual  aids  are  provided  to  assist  S  L-  N/A 
controllers  in  navigating  through  menu 
structures  (7.2.18). 


19.  The  controller  is  required  to  traverse  no  more 
than  four  levels  in  a  menu  structure  (7.2.18). 


S  U  N/A 


20.  When  a  trade-off  is  required  between  menu  S  U  N/A 

breadth  (i.e.,  number  of  options  at  a  level)  _ 

and  menu  depth  (i.e.,  number  of  levels),  the 
design  increases  breadth  rather  than  depth 
(7.2.18). 


I 


I 


D,  Error  Messages  and  User  Guidance 

1.  Error  messages  are  provided  whenever 
needed  (7.5.5). 

Notes 


S  U  N/A 


I 
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2.  Each  error  message  briefly  summarizes  the 
specific  problem  and  proposes  a  specific 
solution  (7.5.5,  7.5.6). 


S  U  N/A 


3.  Error  messages  are  direct  and  precise 
(7.2.14,  7.5.6). 


S  U  N/A 


4.  Error  messages  are  presented  immediately 
after  an  error’s  occurrence  (7.5.7). 


S  U  N/A 


5.  Error  messages  are  not  redundant  (7.5.6). 

6.  Guidance  messages  are  presented  in  mixed 
upper  and  lower  case  (7.5.7). 


s 

u 

N/A 

□ 

□ 

□ 

s 

u 

N/A 

7.  Messages  about  limits  not  met  or  exceeded 
specify  the  appropriate  range  for  data  entry 
(7.5.8). 


SUN/A  • 


3.  Questionable  data  entries  elicit  cautionary 
messages  (7.5.8). 


S  u  N/A  § 


9.  Feedback  regarding  processing  delays 

specifies  the  process,  the  length  of  the  delay, 
and  completion  of  the  process  (7.5.8). 
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VI. 


DATA  ENTRY 
AND  CONTROL  DEVICES  » 

A.  General 

1 .  Input  devices  work  in  ways  that  are  S  U  n/a  | 

compatible  and  consistent  with  the  controller’s 
tasks  (7.4.1).  1 


2.  The  overall  design  of  input  devices  does  not  S  u  .  A 
require  frequent  switching  between  devices 
(7.4.2). 


3*  The  input  device(s)  is/are  appropriate  for  S  u  n/a 
performing  the  necessary  functions  (e.g.,  [ 

alphanumeric  data  entry;  selection  of 
displayed  objects;  cursor  positioning)  (7.4.3). 


i 

i 

f 

i 

f 

'i 


4.  Input  devices  have  been  compared  not  only  S  U  N/A 
for  speed  and  accuracy,  but  also  for  factors  n 

such  as  induced  fatigue,  resolution  capability, 
and  space  requirements  (7.4.4). 


5. 


Controls  and  their  labels  are  sufficiently  visible  S  u  N/A 
under  dim  lighting  conditions  (9.3.4). 


•  •  •  •  9 
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B.  Keyboards 

1 .  Alphanumeric  keys  are  arranged  consistently  S  U  N/A 
on  all  keyboards  that  the  controller  will  use 
(7.4.3).  (The  preferred  arrangement  is  the  ~ 
QWERTY  layout.) 


2.  Keyboards  are  readable  under  all  operating 
conditions  and  backlit,  if  necessary  (7.4.3). 


3.  If  a  numeric  keypad  is  provided,  it  is  visually 
separated  from  the  main  keyboard  and 
arranged  in  a  3  X  3  +  1  matrix  (7.4.3). 


s 

u 

N/A 

□ 

_ 

□ 

s 

u 

N/A 

□ 

r 

□ 

■ 

ABC 

2 

DEF 

3 

7 

8 

1 

9 

as 

pal 

MNO 

6 

<! 

5 

6 

PRS 

7 

TUV 

8 

WXY 

9 

i 

2 

3 

_ 

1 

OPER 

0 

# 

■ 

0 

■ 

Telephone  Keypad 

Calculator  Keypad 

Figure  1.  Telephone  Keypad  and  Calculator  Keypad  Layouts 
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4.  Function  keys  are  provided  for  frequently  SUN/A 

used  commands  (7.4.3). 


3.  Function  keys  are  clearly  labeled  to  indicate  S  U  N/A  ft 
their  function  (7.4.3). 


6.  The  functions  invoked  by  the  function  keys  S  U  N/A 
are  consistent  throughout  the  system  (7.4.3). 


7.  Keys  on  keyboards  and  keypads  have  no  S  U  N/A 

more  than  two  functions  (9.2.2). 

ft 

8.  Monactive  keys  are  left  blank  (i.e.,  not  S  U  N/A 

labeled)  (7.4.3).  ~1 


9.  The  key  used  to  initiate  a  command  is  clearly  S  U  N/A 
labeled  “Enter”  (7.4.3). 


10.  Keyed  data  are  displayed  quickly  (echoed)  on  S  U  N/A 
the  screen  (7.4.3). 


ft 


1 1 .  Tactile  and  auditory  feedback  are  provided  in  S  U  N/A 
response  to  keystrokes  (7.4.3). 


Notes 
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12.  The  main  keyboard  is  located  directly  in  front  S  U  N/A 
of  and  below  the  associated  visual  display,  at 
a  comfortable  distance  from  the  seated  " 

controller's  position  (7.4.3). 


13.  Forearm  and  wrist  supports  are  provided 
(7.4.3). 


14.  Alphanumeric  keys  meet  standards  for 
dimensions,  displacement,  separation  and 
resistance  (7.4.3). 


S  U  N/A 


□ 

S  U  N/A 

□ 

Minimum 

Maximum 

Preferred 


Minimum 

Maximum 

Preferred 


DIMENSIONS* 

Numeric 

RESISTANCE 

Alpha-numeric 

Dual  Function 

10  mm  (0.385  In.) 
19  mm  (075  in.) 

13  mm  (0.5  In.) 

1  N  (3.5  Oil.) 

4  N  (14.0  oz.) 

250  mN  (0,9  oz.) 
1.6  N  (5.3  02.) 

250  mN  (0.9  oz.) 
1,5  N  (5.3  oz.) 

Numeric 

DISPLACEMENT 

Alpha-numeric 

Dual  Function 

SEPARATION 

0.8  mm  (0.03  In.) 
4.8  mm  (0.19  In.) 

1.3  mm  (0.05  In.) 

6.3  mm  (0.25  In.) 

0.8  mm  (0.03  In.) 
4.8  mm  (0.19  In.) 

6.4  mm  (0.25  in.) 

6.4  mm  (0.25  In.) 

•Rotors  to  dimension  D  shown  below. 


i°h 


Figure  2.  Keyboard  Dimensions,  Resistance,  and  Displacement 

From  Human  Engineering  Design  Criteria  for  Military  Systems,  Equipment  and 
Facilities  by  the  Department  of  Defense,  1989,  Table  X,  p,  95 
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S  U  N/A 


1 5.  Guards  have  been  considered  for  any  key  that 
would  present  a  problem  if  inadvertently 
activated  (7.4.3). 


16.  If  alternative  keyboards  are  featured,  they  S  U  N/A 
have  been  tested  for  usability  and  operational 
suitability  (7.4.3). 


E  17.  The  slope  of  the  keyboard  is  adjustable  S  U  N/A 
between  15  and  25  degrees  from  the 
horizontal  (7.4.3). 


E  18.  Keyboard  height  is  adjustable  between  23 
and  32  inches  (7.4.3). 


S  U  N/A 


C.  Touchscreens 


1 .  If  a  touchscreen  is  used,  it  is  suitable  for  the 
task(s)  to  be  performed  by  the  controller 
(7.4.3). 


S  U  N/A 


2.  Controllers  can  achieve  sufficient  touch  S  U  N/A 

accuracy  with  the  touchscreen  (7.4.3). 


3.  j»uchscreen  displays  can  be  read  easily 
under  all  anticipated  lighting  conditions 
(7.4.3). 


S  U  N/A 

- f - 1 
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4.  The  touch  input  strategy  (e.g.,  land-on,  first  S  U  N/A 
contact,  or  lift-off)  is  compatible  with  the 
controller’s  task  objectives  (7.4.3).  ^ 

# 

E  5.  Touchscreen  displays  meet  standards  for  SU  N/A 
required  finger  pressure  (displacement), 
separation  of  touch  areas,  and  resistance 
(7.4.3). 


Figure  3.  Recommended  Dimensions  for  Size  and  Separation 

Between  Touch  Keys 

From  a  study  by  R.  Beaton  and  M.  Weiman  as  cited  in  Human  Factors  in 
Engineering  and  Design  (5th  edition)  by  M.S.  Sanders  and  E.J.  McCormick,  Figure 
1  I  1 9,  p.  36 1 .  Copyright  by  McGraw-Hill.  Used  by  permission. 
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D.  Trackballs 

1.  The  trackball  can  move  the  cursor  in  any  S  U  N/A 

direction  without  causing  cursor  movement  in 
the  opposite  direction  (7.4.3). 


2.  The  trackball  allows  the  controller  to  move  the  S  U  N/A 
cursor  quickly  across  relatively  large 
distances  and  also  to  precisely  position  the  ’ 

cursor  within  a  small  area  (7.4.3). 


E  3.  The  trackball  meets  standards  for  physical  S  U  N/A 
dimensions,  resistance,  and  clearance 
(7.4.3).  ^ 


•  1 

j 

•  1 

i 

I 
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E.  Control  Crip  Devices 

1 .  Any  input  device  meant  to  be  held  and  S  U  N/A 

operated  by  a  standing  controller  can  be  held 
comfortably  for  a  period  of  three  to  four  hours 
(7.4.3). 


E  Mice 

1.  If  a  mouse  is  part  of  the  design,  it  can  be  used  S  U  N/A 
compatibly  with  all  of  the  tasks  the  controller 
is  supposed  to  perform  (7.4.3). 


2.  Controllers  can  easily  and  smoothly  position  S  u  N/A 
the  cursor  with  the  mouse  (7.4.3). 


3. 


Movement  of  the  mouse  produces  cursor 
movement  in  the  same  direction  on  the 
display.  For  example,  if  the  mouse  is  moved 
to  the  left,  the  cursor  moves  to  the  left  on  the 
display  (7.4.3). 


S  U  N/A 


4.  The  mouse  is  equally  usable  with  the  left  or  SUN/A 
right  hand  (7.4.3). 
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E  5.  The  mouse  has  no  sharp  edges  and  meets 
standards  for  width  (1.6  to  2.8  in.),  length 
(2.8  to  4.7  in.),  and  thickness  (1 .0  to  1.6 
in.)  (7.4.3). 


S  U  N/A 


G.  Graphics  Tablets 


1. 


Movement  of  the  stylus  in  any  direction  on  the 
tablet  surface  produces  smooth  movement  of 
the  cursor  in  the  same  direction  (7.4.3). 


S  U  N/A 


2. 


When  the  stylus  is  placed  at  any  point  on  the 
tablet,  the  cursor  appears  at  the  associated 
coordinates  on  the  display  screen  and 
maintains  that  position  until  the  stylus  is 
moved  (7.4.3). 


S  U  N/A 


3.  If  the  stylus  and  tablet  are  to  be  used  for  free-  S  U  N/A 

hand  drawing,  the  device  generates  a  _ _ 

continuous  line  as  the  stylus  is  moved  (7.4.3). 


4.  If  a  graphics  tablet  is  used,  frequent  switching  S  U  N/A  § 

to  the  keyboard  is  not  necessary  (7.4.3).  _ 


5.  The  graphics  tablet  can  be  located  on  the 
work  3tion  within  a  comfortable  distance 
from  the  controller  (7.4.3). 


S  U  N/A 


Notes 
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H.  Pushbuttons  (Actual  and  Virtual) 

I .  Mechanical  pushbuttons  are  sized  and  spaced 
to  support  activation  but  to  prevent  accidental 
activation  (7.4.3).  (See  Figure  5.) 


S  U  N/A 


i 
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2. 


The  surfaces  of  “hard”  pushbuttons  are  rough 
or  concave  (7.4.3). 


S  U  N/A 


§ 


3.  Labeling  of  virtual  pushbuttons  is  consistent 
(7.4.3). 


S  U  N/A 


4.  The  active  and  inactive  states  of  virtual 
pushbuttons  are  visually  distinct  (7.4.3). 


SUN/A  • 


5. 


The  on-off  status  of  software-generated 
togglebuttons  is  made  clear  through  the  use  of 
labels  and  graphic  indicators  (7.4.3). 


S  U  N/A 


E  6. 


Mechanical  pushbutton  resistance  and 
separation  are  in  the  ranges  recommended 
for  single-finger  operations  (7.4.3). 


» 


» 
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_ DIMENSIONS _ _ RESISTANCE _ 

D  Different 

Fingertip  Thumb  or  Palm  Single  Finger _ Fingers  Thumb  or  Palm 

Min.  9.5  mm  (3/8  in.)  19  mm  (3/4  in.)  2.8  N  (10  oz.)  1.4N(5oz.)  2.8N(10oz.) 

Max.  25  mm  (1  in.)  11N(40oz.)  5.6  N  (20  oz.)  23  N  (80  oz.) 


1 1  N  (40  oz.)  5.6  N  (20  oz.)  23  N  (80  oz.) 


Fingertip 

2  mm  (5/64  In.) 
6  mm  (1/4  in.) 


DISPLACEMENT 

A 


Thumb  or  Palm 

3  mm  (1/8  in.) 
38  mm  (1-1/2  In.) 


Single  Finger 

13  mm  (1/2  In.) 
50  mm  (2  In.) 

N  =  Newton 


H  D 


_ SEPARATION _ 

Single  Finger  ®  Different 
Sequential  Fingers 


6  mm  (1/4  In.) 
13  mm  (1/2  In.) 


6  mm  (1/4  In.) 
13  mm  (1/2  in.) 


Thumb  or  Palm 

25  mm  (1  In.) 
150  mm  (6  In.) 


Figure  5.  Design  Criteria  for  Mechanical  Pushbuttons 

From  Human  Engineering  Design  Criteria  for  Military  Systems,  Equipment,  and 
Facilities  (MIL-STD-1472D),  Department  of  Defense,  1989,  p.  91. 


/.  Foot  Switches  and  Pedals 

1 .  Positive  feedback  is  provided  to  indicate 
activation  of  the  foot  switch  (7.4.3). 


S  U  N/A 


2.  The  controller  is  not  required  to  operate  more 
than  one  switch  or  Dedal  with  the  same  foot 
(7.4.3). 


S  U  N/A 


Notes 
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3.  Foot  switches  are  positioned  for  operation  by 
the  toe  or  ball  of  the  foot  (7.4.3). 


E  4.  Foot  switches/pedals  meet  requirements 
for  dimensions,  resistance,  and 
displacement  (7.4.3). 


s 

u 

N/A 

□ 

□ 

□ 

s 

u 

N/A 

□ 

DIAMETER 

(D) 

RESISTANCE 

DISPLACEMENT  (A) 

Foot  Will 
Not  Rost  On 
Control 

Foot  Will 
Rest  On 
Control 

Normal 

Operation 

Ankle 

Flexion 

Only 

Total  Leg 
Movement 

Min. 

13  mm 
(0.5  in.) 

18  N 
(4  lb.) 

45  Nl 
(101b.) 

13  mm 
(0.5  in,) 

25  mm 
(1  in.) 

25  mm 
(1  in.) 

Max. 

90  N 
(20  lb.) 

90  N 
(20  lb.) 

65  mm 
(2.5  in.) 

65  mm 
(2.5  in.) 

100  mm 
(4  in.) 

mm  -  millimeter 
N  -  Newton 


Figure  6.  Foot  Switch  Operations 

Adapted  from  Human  Engineering  Design  Criteria  for  Military  Systems,  Equipment, 
and  Facilities  (MIL-STD- 1472D),  Department  of  Defense,  Figure  12,  p.  93. 
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Motes 


ERGONOMICS 

AND  WORKSTATION  DESIGN 


A.  User-Centered  Workstation  Design 

1 .  Controls  are  designed  and  arranged  to  be 
consistent  with  the  controller’s  natural 
sequence  of  operational  actions  (9.3.3). 


S  U  N/A 


2. 


Frequently  used  controls  are  easy  to  see  and 
to  reach  (9.2.2). 


S  U  N/A 


3. 


High-priority  controls  are  centrally  located  and 
placed  as  close  as  possible  to  the  controller 
(9.3.4). 


S  U  N/A 


4. 


Workstation  dimensions  are  adequate  for  the 
extremes  of  the  controller  workforce  (i.e.,  the 
5th  to  the  95th  percentile  on  applicable 
dimensions)  (9.3.1,  9.4.1). 


S  U  N/A 


5.  Keyboards  and  workstation  controls  are 
consistently  backlit  if  necessary  (9.2.2). 


S  U  N/A 

_J _ _ J 
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6.  Adjacent  controls  are  arranged  so  that  S  U  N/A 

sufficient  space  is  between  them  to  operate 
them  easily  and  minimize  the  chances  of 
accidental  activation  (9.3.3,  9.3.4). 


7.  Controls  are  spaced  far  enough  apart  that  S  U  N/A 
they  can  be  easily  grasped  and  manipulated 
(9.3.4). 


8.  Workstation  controls  are  sufficiently  visible  to  S  U  N/A 
the  controller  while  seated  and  standing 
(9.3.3). 


9.  Controls  are  equally  accessible  and  usable  by  SU  N/A 
left-  and  right-handed  controllers  (9.3.3). 


10.  Controls  can  be  reached  without  excessive  S  U  N/A 
shoulder  movement  or  back 
bending/stretching  (9.3.3,  9.3.4). 


1 1.  Controls  used  in  sequence  are  located  close  S  U  N/A 
to  each  other  (9.3.3).  1 


12.  Controls  used  to  adjust  visual  displays  are  S  U  N/A 
located  near  the  display  set  (9.3.3). 


Notes 


L- 


WORKSTATION  DESIQfl 


I 


13.  The  workstation  provides  sufficient  space  for 
three-person  teams  (9.3.2). 


14.  The  workstation  design  concept  considers  the 
operational  needs  of  the  particular  ATC 
environment  for  which  it  is  intended  (ATCT, 
TRACON,  ARTCC)  (9.3.2). 


s 

u 

N/A 

□ 

□ 

s 

u 

N/A 

f» 


15.  Workstations  are  arranged  and  spaced  to 
allow  ready  access  by  Airway  Facilities 
personnel  (9.3.2). 


S  U  N/A 


16.  It  is  easy  to  open  or  remove  equipment  covers  S  U  N/A 
on  racks  (9.3.2). 


17.  Easy  access  is  provided  to  workstation 
components  (9.3.2). 


S  U  N/A 

1  I  1  ® 


18.  Mirror-image  layouts  are  avoided  within  and 
across  ATC  facilities  (9.3.3). 


S  U  N/A 


19.  The  needs  of  individual  facilities  have  been  S  U  N/A 
considered  in  determining  space  requirements 
(9.3.3). 


Motes 
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20.  Video  display  monitors  are  adjustable;  they  ft  .  U.,N/A 
can  be  tilted  in  the  vertical  plane  and  swiveled  1 
in  the  horizontal  plane  (9.3.3). 


21.  Ceiling-mounted  display  monitors  can  be 
swiveled  and  tilted  (9.3.3). 


S  U  N/A 


22.  Indicators  and  their  labels  are  sufficiently 
visible  under  dim  lighting  conditions  (9.3.4). 


S  U  N/A 


23.  Workstation  labeling  is  visible  and 
understandable  (9.2.2). 


S  U  N/A 


24.  Computer  screen(s)  and  work  surfaces  are 
free  from  glare  and  reflections  under  all 
anticipated  lighting  conditions  (9.6.2,  7.2.21). 


S  U  N/A 


E  25.  Levels  of  electromagnetic  radiation  emitted  .ft  0  1^ 
by  video  display  terminals  have  been 
minimized  (9.3.3). 


Notes 
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B.  Design  of  Control  Room  Seating 

1.  Chairs  provided  for  controller  workstations  are  S  U  N/A 
comfortable  and  support  the  lower  back 
(9.4.2). 


2.  The  seat  and  backrest  are  adequately 
cushioned  (9.4.2). 


S  U  N/A 


E  3.  Seat  height  is  adjustable  within  15  to  21 
inches  (9.4.2). 


S  U  N/A 


E  4.  The  seat’s  backrest  reclines  between  100  -s- rM_N/A  t 

and  1 15  degrees  (9.4.2).  __| _ 


E  5.  Arm  rests  are  2  inches  wide  and  8  inches  SUN/A 

long  (9.4.2).  _  • 


C.  Design  of  Communications  Equipment 

1.  Transmitted  speech  is  sufficiently  intelligible  SJJ  N/A 

(9.5.i).  LL1__ 


2.  Messages  conveyed  over  loudspeakers  are  S  U  N/A 
adequately  intelligible  (9.5.2).  [_  _ j_ 


Notes 
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3.  There  are  no  noticeable  squeal  problems  or 
echo  effects  (9.5.1 ). 

S  U  N/A 

1 

_ i 

4.  Listeners  can  differentiate  between  multiple 
channels  fed  into  headphones  (9.5.2). 

S  U  N/A 

5.  Communication  is  unaffected  by  delays  due  to 
satellite  transmission  ^9. 5.2). 

S  U  N/A 

6.  The  speaker  is  not  distracted  by  his/her  own 
side  tone  (9.5.2). 

S  U  N/A 

7.  Headset  design  helps  to  maximize 
intelligibility  (9.3.2). 

3  IJ  N/A 

8.  Mo  bare  metal  parts  of  the  headset  come  into 
contact  with  the  controller’s  skin  (9.5.4). 

S  U  N/A 

□ 

9.  Controllers  who  wear  glasses  can  comfortably 
wear  headphones  or  other  communication 

S  U  N/A 

equipment  (9.5.4). 


10.  Hands-free  operation  of  communication 

equipment  is  possible  under  normal  working 
conditions  (9.5.4). 


S  U  N/A 


WORKSTATION  DESIGN 


1 1.  Telephone  handsets  are  readily  accessible 
(9.5.4). 


S  U  N/A 


12.  For  multiple  telephone  handsets,  the  most  s  u  N/A  § 

frequently  used  or  the  most  urgently  needed  _ _ j 

handset  is  the  most  readily  accessible  (9.5.4). 


13.  Volume/gain  controls  are  separate  from  on-off  s  u  N/A  ^ 
controls  (9.5.5).  I 


14.  Volume/gain  controls  are  limited  to  an  audible  s  u  N-/A 
level  (9.5.5).  | 


15.  Squelch  control  is  provided  to  suppress 

channel  noise  during  inactive  periods  (9.5.5). 


S  U  N/A 


16.  The  controller  can  manually  deactivate  the 
squelch  control  (9.5,5). 


S  U  N/A 


17.  Foot  pedals  are  provided  as  alternatives  to  SUN/A  § 
hand-activated  microphone  switches  (9.5.5). 


E  18.  Appropriate  provision  has  been  made  for 
the  calibration  of  microphones  and 
headphones  (9.5.1). 


S  U  N/A 


Notes 
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E  19.  The  location  of  the  foot  pedal’s  fulcrum,  A  N/A 

placement  of  the  foot  pedal  in  relation  to  j_ 

other  controls,  and  placement  of  the  foot 
pedal  in  relation  to  the  seated  controller  are 
satisfactory  (9.5.5).  ft 


E  20.  System-input  devices  are  designed  for  SUN/A 

optimal  response  to  the  range  of 
frequencies  between  200  and  6,100  Hz 
(9.5.1). 


E  21.  Across  the  frequency  response  bandwidth,  SU  N/A 
amplitude  variation  is  at  or  below  plus  or  [  j 

minus  3  dB  (9.5.1). 


E  22.  Microphones  used  with  amplifiers  have  a 
dynamic  range  that  permits  them  to  pick 
up  variations  of  at  least  50  dB  in  signal 
input  (9.5.1). 


S  U  N/A 
~ 1 1 ! 


ft 


E  23.  Appropriate  techniques  are  used  to  S  U  N/A 

minimize  the  effects  of  noise  during  speech 
transmission  (9.5.1). 


ft 


ft 


Notes 
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WORKSTATION  DESIGN 


E  24. 


If  intelligibility  testing  is  conducted,  scores 
are  at  or  above  the  following  cutoff  points 
for  the  various  testing  methods  (ANSI 
phonetically  balanced  (PB)  -  90%;  Modified 
Rhyme  Test  -  97%;  Articulation  Index  -  0.7) 
(9.5.2). 


S  U  N/A 

t 


E  25.  When  two  earphones  are  in  use,  sound 

pressure  level  can  be  increased  to  at  least 
100  dB  overall  (9.5.5). 


S  U  N/A 


D.  Environmental  Design 

1 .  Ambient  lighting  of  the  workstation  is 
adequate  (9.6.1). 


S  U  N/A 


I 


2.  The  controller  can  easily  recognize  all  key 
labels  on  the  keyboard,  electronic  display 
keypads,  and  trackball  (9.6.1). 


S  U  N/A 

• 


3.  Lighting  at  the  console  shelf  is  adequate  for 
reading  and  writing  (9.6.1). 


S  U  N/A 


» 


4.  Cinder  the  proposed  lighting  conditions,  the  SU  N/A 
controller  can  readily  locate  switches, 
controls,  headset  jacks,  connectors,  handles, 
and  display  recess  mechanisms  (9.6.1). 


Notes 
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5.  Control  labels  are  readable  (9.6.1).  S  U  N/A 

6.  The  controller  is  not  distracted  by  shadows,  S  U  N/A 

glare,  or  reflections  (9.6.1, 9.6.2). 

7.  Adequate  display  contrast  is  maintained  for  S  U  N/A 

textual  and  graphic  information  (9.6.1). 

8.  Lighting  is  adequate  for  emergency  and  S  U  N/A 

maintenance  purposes  (9.6.1). 

9.  Maintenance  lighting  does  not  interfere  with  S  U  N/A 

controller  tasks  at  the  ATC  console  (9.6.1). 


10.  Design  of  the  work  environment  limits  sources  S  U  N/A 
of  distraction  (5.2.4).  I 


E  11.  The  brightest  area  in  the  workplace  is  no  S  U  N/A 
more  than  three  times  brighter  than  the 
darkest  area  (9.6.1 ). 


E  12.  Ambient  noise  is  at  or  below  65  dB  (9.6.4).  S  U  N/A 


E  13.  Provisions  have  been  made  to  reduce  s  U  N/A 

ambient  noise  caused  by  vibration  (9.6.4). 


Notes 
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HUMAN  FACTORS  PLANNING 


AND  EVALUATION 


> 


A.  Human  Factors  Plan 

1.  Responsibilities  for  who  will  develop  and  SUN/A  ) 

control  the  human  factors  work  are  _ _ 

specifically  designated  (2.3.1). 


2.  Methods  for  coordinating  human  factors  S  u  N/A 

concerns  and  considerations  among  L 

integrated  product  team  members  and 
contractor  personnel  are  established  (2.3.1). 


3.  The  processes  and  procedures  for  how  the 
government  will  direct,  control,  and  monitor 
the  human  factors  efforts  are  described 
(2.3.1, 2.4.1, 2.5.1). 


S  U  N/A 


I 


I 

4.  The  operators  and  maintainers  of  the  system 
are  described  in  the  plan  (2.3.1). 


S  U  N/A 


5.  The  user  functions/tasks  are  described  in  S  U  N/A  ^ 

detail  (2.3.1).  _ 

Notes 
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6.  The  system  objectives  for  personnel 

resources,  training,  workload,  ergonomics, 
and  safety  are  identified  (2.4.1). 


S  U  N/A 


7.  Key  design  goals  are  operationally  defined 
(i.e.,  described  in  terms  of  how  they  will  be 
measured  and  evaluated)  (2.3.1). 


S  U  N/A 


8.  Parameters  to  be  used  as  criteria  against 
which  the  system  will  be  evaluated  are 
identified  (2.3.1,  2.4.1). 


S  U  N/A 

- 1 1 - 


» 


» 


9.  The  tasks  and  analyses  that  need  to  be 
conducted  to  support  the  definition  and 
evaluation  of  system  performance 
requirements  are  specified  (2.4.1). 


S  U  N/A 

t  i  i 


10.  The  system  constraints  on  personnel 

resources,  training,  ergonomics,  and  safety 
are  described  (2.5.1) 


S  U  N/A 


1 1 .  Critical  known  issues  and  work  to  be  done  to 
address  system  performance  requirements  are 
identified  (2.4.1,  2.5.1). 


S  U  N/A 


II 


§ 


§ 


Notes 


12.  Critical  "unknowns"  are  listed  (to  be 
answered/assessed  as  more  information 
becomes  available)  (2.3.1,  2.5.1). 


S  U  N/A 


13.  A  feasible  schedule  is  proposed  for 
accomplishing  the  human  factors  work 
(2.5.1). 


S  U  N/A 


B.  Test  Methods 


1.  The  proposed  method  of  testing  is  appropriate  S  U  N/A 

(10.4.1).  n 


If  field  observations  are  used,  they  are 
obtained  under  conditions  that  are 
representative  of  the  full  scope  of  actual 
operations  (10.4.1). 


S  U  N/A 
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3.  If  questionnaires  are  used: 


S  U  N/A 


S  U  N/A 


The  questions  are  simple  and  direct  (10.4.1).  S  U  N/A 


The  questionnaire  is  unbiased  (10.4.1). 


The  questionnaire  is  administered  as  soon  as  SU  N/A 
possible  after  the  task  ( 1 0.4. 1 ). 


The  questionaire  is  given  to  a  representative  S  U  N/A 
set  of  users  (10.4.2).  i 


4.  The  test  variables  are  operationally  defined  in  _S  U  N/A 
the  test  plan  (10.4.2). 


5.  The  test  participants  (subjects)  are  S  U  N/A 

representative  of  the  user  population  (10.4.21.  I 


6.  The  test  desiqn  controls  for  subject  bias 
(10.4.2). 


s  UN/A 


7.  The  conditions  (scenarios)  included  in  the  test  3  U  N/A 
plan  are  representative  of  actual  operations 
(10.4.2). 


Notes 
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8.  If  there  is  more  than  one  condition,  the  order  SUN/A 
of  the  conditions  is  counterbalanced  or  ^ 

randomized  (10.4.2). 


t 

C.  Analysis  of  Test  Results 

1.  The  proposed  methods  of  data  analysis  are  S  U  N/A 
appropriate  for  the  test  design  (10.5). 


2.  The  measure  of  central  tendency  (i.e.,  mean,  SU  N/A 

median,  or  mode)  used  is  the  most  j 

appropriate  for  the  test  results  (10.5.1). 

» 

3.  A  measure  of  variability  is  included  in  the  S  U_N/A 

analysis  (10.5.1).  !  [ 


4.  if  a  measure  of  correlation  is  used  or  S  U  N/A 

proposed,  it  is  appropriate  for  the  data 
(10.5.1). 


5. 


If  a  t-test  is  used  or  proposed,  it  is  appropriate 
(for  a  comparison  between  two  groups) 
(10.5.2V 


S  U  N/A 


6. 


If  an  Analysis  of  Variance  (ANOVA)  is  used  or 
preposed,  it  is  appropriate  (for  a  comparison 
between  more  than  two  groups)  (10.5.2). 


S  U  N/A 


Notes 
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7.  In  any  report  of  test  results,  the  level  of  S  u  N/A 

statistical  significance  is  cited  appropriately 

(10.5.2) .  ~  ’ 

ft 

8.  If  a  regression  analysis  is  used,  all  of  points  S  U  N/A 

that  are  predictions  and  projections  are  close 

to  the  actual  data  (10.5.2). 

9.  In  the  interpretation  of  test  results,  the  S  U  N/A 

distinction  between  statistically  and  _ 

operationally  significant  results  is  clear 

(10.5.3) . 


» 
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